AxAuth Service
AxAuth is Axinom's identity provider for signing in with an email address and a password. It is OpenID Connect compliant and keeps users in its own user stores, so you don't need a third-party identity provider.
AxAuth is a managed service: Axinom hosts and operates it, and you enable it for each environment that needs it.
What You Can Use It For
Sign in to the Management System
Management System users can sign in with email and password instead of, or in addition to, providers such as Google or Microsoft Entra ID. When you enable AxAuth for an environment, the Identity Service sets up the "Email and Password" provider automatically.
See Configuring Email and Password (AxAuth).
Sign up and sign in to your end-user apps
Your own apps can let end users sign up, sign in, and reset their password, with AxAuth as the user store behind the User Service.
- Set up AxAuth for end-user authentication
- Sign in with AxAuth
- Migrate users from an existing user store
How It Works
- User stores: AxAuth keeps users in user stores. Default user stores are created when you enable the service, and you manage them in the AxAuth Service configuration in the Admin Portal.
- Settings: you can, for example, enforce a strict password policy or block sign-ups from specific email domains.
- Webhooks: AxAuth calls your webhooks when an end user signs up or forgets their password, so you can send verification and password reset emails.
You then complete the flow through the AxAuth GraphQL API or the
@axinom/mosaic-user-authlibrary. See Webhooks for how to implement them securely.
Get Started
- Enable the AxAuth Service for your environment.
- Follow the guide for your use case above.